Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

uraimo/run-on-arch-action

A Github Action that executes jobs/commands on non-x86 cpu architectures (ARMv6, ARMv7, aarch64, s390x, ppc64le, riscv64) via QEMU

7/10

nvidia/model-optimizer/.github/actions/fill

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

7/10

oaslananka/_ops/.github/actions/upload-ops-artifact

Repository operations control plane for CI/CD, automation, release orchestration, audit, and mirror management.

2/10

zarf-dev/setup-zarf

GitHub Action for Installing and Configuring Zarf

4/10

nosense588/spring-boot/.github/actions/build

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

2/10

crazy-max/ghaction-chocolatey

GitHub Action for Chocolatey, the package manager for Windows

5/10

Maintained action available

zephyrproject-rtos/action_scancode

3/10

step-security/backport-github-action

Backport CLI tool as a Github Action. Secure drop-in replacement for sorenlouv/backport-github-action.

8/10

Maintained by StepSecurity

agslima/app-stayhealthy-pipeline/.github/actions/validate-promotion

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

6/10